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ABSTRACT 


This  is  the  final  report  for  a  research  project  entitled  "Artificial 
Intelligence  Theory  and  Reconfigurable  Control  Systems"  (ARO  Contract 
No.  DAAG29-84-K-0048).  -'The  principal  topic  of  research  in  this  effort 
was  the  development  of  analysis  and  design  methods  for  fault-tolerant  con¬ 
trol  systems,  using  artificial  intelligence  concepts;  to  screen  failure 
hypotheses,  and  more  conventional  control  theory  for  Reconfiguration  and 
actual  control.  Methods  developed  include  new  graphical  presentations  of 
logic  trees  and  signal  dependency  graphs,  procedures  for  translating  expert 
systems  from  LISP  to  Pascal,  the  definition  of  performance  metrics  for 
real-time  expert  systems,  a  Control  Equation  Parser]  for  computer-aided 
control  system  design,  and  a  control-reconfiguration  strategy  based  on 
proportional-integral  implicit  model-following.  A  Rule-Based  Flight 
Control  System  for  a  tandem-rotor  helicopter,  implemented  with  parallel 
microprocessors  and  operating  in  real  time,  was  developed  in  the  course  of 
this  research. 


A  sub-task  entitled  "Computer-Aided  Heuristics  for  Piloted  Flight" 
also  was  accomplished  with  funds  made  available  by  the  Naval  Air  Systems 
Command  of  the  U.S.  Navy.  The  purpose  of  this  task  was  to  identify  an 
expert  system  structure  that  would  reduce  the  pilot  workload  associated 
with  flying  a  single-seat  high-performance  aircraft.  This  research 
culminated  in  the  definition  of  AUTOCREW,  an  "expert  system  of  expert 
systems"  based  on  the  paradigm  of  a  World  War  II  bomber  crew. 
AUTOCREW  was  implemented  in  a  non-real-time  personal  computer 
simulation,  and  its  structure  is  well-posed  for  parallel  implementation. 


lleth-tasks  made  use  of  the  Princeton  Rule-Based  Controller,  a 
unique  software  architecture  for  combining  procedural  and  symbolic  pro¬ 
cessing.  The  knowledge  base  is  developed  in  the  LISP  computer  language 
and  is  translated  with  the  inference  engine  into  the  Pascal  language.  The 
ease  with  which  Pascal  code  can  be  embedded  in  the  knowledge-base 
structure  makes  this  a  highly  suitable  tool  for  task  and  algorithm  schedul¬ 
ing. 


The  period  of  performance  for  this  contract  was  3/12/84  to  3/1 1/88. 
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1.  INTRODUCTION 


As  computers  become  smaller,  faster,  and  more  reliable,  they 
change  the  way  in  which  many  things  are  done.  Hardware  is  giving  way  to 
software:  the  functions  of  machines  formerly  performed  by  mechanisms 
and  structures  are  being  taken  over  by  computers  and  numerical  logic. 
Increased  reliance  is  being  placed  on  electronic  systems  for  control,  and  it 
is  becoming  crucial  that  these  systems  operate  with  a  high  degree  of  relia¬ 
bility.  Performance  must  be  assured,  even  when  system  components  fail; 
otherwise,  there  is  the  danger  not  only  of  aborting  the  original  mission  but 
of  losing  the  entire  machine.  The  new  control  systems  must  not  only  be 
reliable  by  conventional  standards,  they  must  be  tolerant  of  a  range  of  fail¬ 
ures  not  previously  considered  detrimental. 


1.1  FAULT-TOLERANT  CONTROL  SYSTEMS 

Fault-tolerant  control  systems  typically  have  one  or  more  of  three 
attributes:  robustness,  reconfigurability,  and  restructurability.  Robustness 
implies  insensitivity  to  variations  in  the  parameters  or  structure  of  the  sys¬ 
tem.  If  physical  parameters  change  or  the  nature  of  system  dynamics  is 
altered,  the  robust  system  continues  to  operate  as  originall)  intended, 
providing  response  to  inputs  and  disturbances  that  is  close  to  nominal 
performance.  Reconfigurability  implies  that  some  of  the  control  system's 
parameters  can  be  purposely  modified  to  account  for  uncontrollable 
changes  in  the  system,  such  as  failed  sensors  or  actuators  or  damaged 
structural  elements.  Restructurability  subsumes  reconfigurability,  imply¬ 
ing  that  not  only  parameters  but  the  structure  of  the  system  itself  can  be 
changed  to  accommodate  uncontrollable  changes.  Whereas  the  robust  sys¬ 
tem  obtains  fault  tolerance  with  fixed  parameters  and  structure,  recon- 
figurable  and  restructurable  systems  must  be  adaptive,  providing  some 
degree  of  fault  detection  and  identification  as  well  as  the  ability  to  alter  the 
system.  The  latter  should  achieve  satisfactory  performance  over  a  wider 
range  of  conditions  than  is  obtained  by  robustness  alone;  otherwise  the 
added  complexity  is  not  warranted. 


N^’ 


While  the  robust  system  might  be  considered  "dumb,"  in  the  sense 
that  it  does  not  have  to  know  about  or  respond  to  system  changes,  restruc¬ 
turable  and  reconfigurable  systems  must  be  "smart,"  sensing  and  adjusting 
to  system  changes.  Consequently,  these  latter  systems  must  possess  a  degree 
of  intelligence  —  an  ability  to  calculate,  reason,  perceive  relationships  and 
analogies,  learn,  store  information,  classify,  generalize,  and  adjust  to  new 
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situations.  Of  course,  they  should  be  robust  to  the  extent  that  the  situation 
does  not  get  out  of  hand  while  adaptation  is  occurring.  Together,  intelli¬ 
gence  and  information  form  knowledge.  Systems  that  restructure  or 
reconfigure  can  be  called  Knowledge-Based  Systems,  for  they  must  contain 
the  intelligence  to  act  and  the  information  on  which  to  base  needed  actions. 


1.2  BACKGROUND  IN  MACHINE  INTELLIGENCE  AND 
CONTROL  THEORY 

Since  the  term  "artificial  intelligence"  was  first  coined  in  1956,  the 
field  has  been  the  home  of  research  in  expert  systems,  automatic  program¬ 
ming,  theorem  proving,  perception  problems,  data-base  retrieval,  robotics, 
combinatorial  and  scheduling  problems,  and  natural  language  processing 
[1-3].  The  first  six  of  these  are  most  closely  related  to  the  proposed 
research.  Expert  systems  use  the  paradigm  of  a  panel  of  experts  to  orga¬ 
nize  rule-based  decision  making.  Although  most  are  basically  deductive  in 
operation,  some  use  inductive  reasoning  for  knowledge  acquisition  [4]. 
Automatic  programming  establishes  a  basis  for  translating  and  compiling 
instructions  and  data  that  are  specified  in  one  form  into  another  form  that 
is  suitable  for  computation.  Theorem  proving  deals  with  the  use  of  given 
evidence  to  obtain  a  general  statement  of  (usually  mathematical)  fact. 
ierception  problems  could  address  a  wide  range  of  issues;  in  the  current 
context,  we  are  most  interested  in  the  effect  that  belief  systems  may  have 
on  the  efficiency  and  correctness  of  real-time  decision  making  [5].  Data¬ 
base  retrieval  is  endemic  to  the  use  of  any  knowledge-based  system;  the 
principal  area  of  interest  here  is  in  efficient  search  routines  that  relate  fail¬ 
ure  symptoms  to  failed  elements.  Robotics  treats  the  application  of  deci¬ 
sion  making  and  control  to  physical  systems;  for  our  purposes,  the  heli¬ 
copter  may  be  considered  to  be  the  robot. 

The  relationship  between  machine  intelligence  and  control  theory 
certainly  predates  the  modem  interest  in  robotics,  as  Norbert  Weiner  and 
others  were  addressing  cybernetics  and  automata  many  decades  ago  [6,7]. 
Nevertheless,  there  seemed  little  reason  to  connect  the  two  until  computers 
made  the  necessary  computations  and  communication  practical.  In  fact,  it 
is  clear  that  the  present  state  of  robotics  owes  far  more  to  control  theory 
than  to  machine  intelligence  [8]. 

The  development  of  control  theory  tended  to  follow  available  appli¬ 
cations;  high-performance  aircraft  of  the  1950s  needed  stabii;ty  augmenta¬ 
tion,  and  the  technology  was  available.  As  aircraft  encountered  a  growing 
range  of  flight  conditions,  adaptation  (by  scheduling  control  gains  and  lim- 
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its  with  dynamic  pressure  and  Mach  number)  became  common,  introducing 
a  modicum  of  intelligence  to  these  early  systems.  A  significant  portion  of 
the  control  theory  that  ultimately  will  contribute  to  robotics  and  intelligent 
control  had  its  origins  in  aeronautical  applications. 


"Fuzzy  sets"  provide  another  example  of  the  contribution  that  con¬ 
trol  theory  has  made  to  machine  intelligence  [9].  Fuzzy  sets  have  their  ori- 
H  gins  in  classical  probability  and  statistics  as  applied  to  signal  processing  and 

control  systems;  they  assign  subjective  attributes  to  uncertain  factors  and 
are  claimed  to  provide  an  "expressive"  framework  for  making  decisions 
with  soft  information.  The  fuzzy  set  approach  has  been  adopted  as  an 
alternative  to  Bayesian  logic  in  some  expert  systems  that  reason  under 
•  uncertainty. 


Fault-tolerant  control  developments  have  tended  to  follow  the  con¬ 
cepts  of  robustness  [10-11],  parallel  redundancy  [12-13],  analytical  redun¬ 
dancy  [14-15],  and  self-tuning  or  adaptive  regulation  [16-17].  Robustness 
has  been  discussed  previously.  Parallel  redundancy  typically  uses  compa¬ 
rison,  voting,  and/or  averaging  of  similar  components  either  to  select  out 
failed  components  or  to  reduce  their  impact  [18].  Analytical  redundancy 
combines  the  remaining  unfailed  dissimilar  components  to  perform  the 
functions  of  a  failed  component.  A  self-tuning  regulator  uses  simple  gain- 
adjustment  laws  to  maintain  some  system  metric  (e.g.,  bandwidth  or  natural 
frequency)  at  a  desirable  value.  The  latter  three  approaches  can  be  said  to 
restructure  or  reconfigure  the  controller. 


2.  RESULTS  OF  THE  PROJECT 


b 

2.1  ARTIFICIAL  INTELLIGENCE  THEORY  AND 
RECONFIGURABLE  CONTROL  SYSTEMS 


'.y. 
-\  ■*. 


The  project  Artificial  Intelligence  Theory  and  Reconfigurable  Con¬ 
trol  Systems  was  begun  in  March  1984  and  was  completed  in  March  1988. 
The  principal  goals  were  to  demonstrate  a  real-time  expert  system  for 
fault-tolerant  control  and  to  investigate  methods  for  fault-tolerant  control 
systems  with  limited  on-line  learning  attributes.  These  goals  have  been 
met,  and  additional  accomplishments  have  been  achieved.  Research  results 
have  been  documented  in  five  interim  technical  reports  [19-23],  one 
technical  note  [24],  and  eight  technical  papers  [25-32].  One  M.S.E.  thesis 
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[33]  and  two  Ph.D.  theses  [34,35]  will  be  completed  shortly. 


Several  interim  reports  expanded  on  concepts  that  were  explored  in 
the  project.  Reference  19  described  the  general  philosophy  of  the  work, 
presenting  the  program  of  research,  defining  expert  and  production  sys¬ 
tems,  reviewing  control  principles,  and  discussing  fault  detection  and  iden¬ 
tification.  Methods  of  analytical  redundancy  were  reviewed  and  their 
potential  combination  with  rule-based  search  was  described  in  Ref.  20.  A 
LISP-based  expert  system  for  detecting  failures  in  aircraft  systems  was 
presented  in  Ref.  21.  References  22  and  23  report  the  results  of  an  under¬ 
graduate  project,  in  which  a  portion  of  the  maintenance  diagnostic  proce¬ 
dures  described  in  the  Army  maintenance  manuals  for  the  CH-47  helicopter 
were  transcribed  to  a  LISP-based  expert  system.  Reference  24  summarized 
the  project  for  a  national  artificial  intelligence  newsletter. 

The  real-time  Rule-Based  Fault-Tolerant  Flight  Control  System 
(RBFCS)  shown  in  Fig.  1  has  five  principal  components:  Executive  Con¬ 
trol,  Failure  Detection,  Failure  Diagnosis,  Failure  Model  Estimation,  and 
Reconfiguration.  Each  of  these  components  can  be  realized  as  a  separate 
process;  for  the  present  multiprocessor  implementation,  they  are  grouped 
in  three  processes  according  to  computational  complexity,  as  shown  in  Fig. 
2.  Each  process  is  resident  on  a  separate  80286/7-based  single  board  com¬ 
puter,  and  the  three  processors  communicate  via  a  Multibus  connection 
(Fig.  3).  The  three-board  unit  plus  required  analog/digital  and  digi¬ 
tal/analog  converters  would  easily  fit  inside  a  single  Flight  Computer  Unit 
housing  used  in  earlier  flight  tests  at  Princeton. 

CONTROL  STSTEM 


Figure  1.  Organization  of  the  Rule-Based  Fault-Tolerant  Flight  Control 

System. 


Our  initial  approach  to  combining  quantitative  and  qualitative  infor¬ 
mation  for  Failure  Diagnosis  is  described  in  Ref.  25.  The  dynamic 
relationships  of  the  controlled  system  (Fig.  4)  are  translated  into  a  Signal 
Dependency  Graph  (Fig.  5).  The  goal  of  failure  diagnosis  is  to  determine 
the  failure  origin  from  system  measurements.  Because  a  limited  number  of 
measurements  leave  some  uncertainty  regarding  the  failure  origin,  the  ini¬ 
tial  objective  is  to  deduce  a  set  of  most  likely  failure-origin  hypotheses 
through  a  process  of  Elimination,  Intersection,  and  Ordering  cf  failure- 
origin  candidates.  The  problem  reduction  follows  the  search  indicated  by 
Fig.  6  using  cause-and-effect  sensitivities  based  on  worst-case  effects  of  all 
catalogued  failures.  Failure  Diagnosis  serves  to  screen  the  large  number  of 
possible  failures  in  preparation  for  Failure  Model  Determination,  which 
uses  a  multiple-model  algorithm  to  pin  down  the  most  likely  failure  state. 


CONTRCX  system 


Figure  2.  Software  Architecture  of  the  Rule-Based  Fault-Tolerant 

Flight  Control  System. 
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Figure  3.  Hardware  Architecture  of  the  Rule-Based  Fault-Tolerant 

Right  Control  System. 
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Figure  4.  Block  Diagram  of  a  Typical  Dynamic  System. 


Figure  5.  Signal  Dependency  Graph  for  a  Typical  Dynamic  System. 


Figure  6.  Problem  Reduction  Approach  to  Failure-Origin  Diagnosis. 

Reference  27  presents  an  overview  of  the  RBFCS,  whose  contents 
are  summarized  in  Table  1.  We  have  modified  the  typical  logic  diagram 
that  portrays  the  firing  of  rules  and  the  setting  of  parameters  to  explicitly 
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show  the  parameter  values  that  trigger  specific  rule  actions  (Fig.  7).  This 
new  symbology  provides  a  much  clearer  indication  of  rule-firing  effects 
than  do  previous  notations;  an  application  to  the  Executive  Control  Know¬ 
ledge  Base  is  shown  in  Fig.  8.  The  principal  functions  of  the  control  sys¬ 
tem,  including  estimation  and  control  computation,  are  executed  as  "side 
effects"  of  the  search  procedure.  When  a  rule  is  tested,  it  may  initiate  a 
numerical  task  to  obtain  the  quantitative  answers  that  allow  a  response  of 
"True."  Further  developments  of  the  RBFCS  were  reported  in  Ref.  29. 


Table  1 

Control  System  Knowledge  Base  Contents 


Process  Process  Tasks 

1  Process  1  Control 

Executive  Control 

2  Prooess  2  Control 

Failure  Detection 

Failure  Mod*:  Estimation 
Reconfiguration 

3  Prooass  3  Control 

Failure  Diagnosis 
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Pascal  inference  engine  requires  13  Kbytes  (excluding  compiler  library  routmas) 
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Figure  7.  Graphical  Representation  of  the  Knowledge  Base. 
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Figure  8.  Sample  of  Executive  Control  Knowledge  Base. 


The  Control  Equation  Parser  is  a  computer  program  for  symbolic 
manipulation  of  control  system  design  equations  [26].  It  translates  expres¬ 
sions  written  in  standard  state-space  format  into  the  LISP  computer  lan¬ 
guage  for  evaluation.  Vectors  and  matrices  are  defined  easily,  and  com¬ 
mon  operations  of  linear  algebra  are  executed  readily.  Numerical  solutions 
then  can  be  obtained  by  executing  LISP  code  or  by  calling  FORTRAN  sub¬ 
routines.  The  program  provides  a  highly  interactive  tool  for  assisting  in 
the  design  of  multivariable  control  systems. 

Inference  mechanisms  that  deduce  the  most  likely  failure  mechanisms 
for  given  symptoms  were  presented  in  Ref.  28.  The  analysis  is  carried  out 
in  a  local  sense,  where  only  probabilistic  information  and  causality  are  used 
to  generate  failure  models,  then  in  a  global  sense,  where  the  models  are 
grouped  for  heuristic  pruning.  This  work  is  supported  by  a  simulation  that 
models  the  flight  control  systems  and  subsystems  of  the  CH-47  helicopter  in 
substantial  detail. 

Having  determined  a  failure  model,  it  is  necessary  to  restructure  the 
control  logic.  If  this  is  to  be  done  at  a  high  level  of  knowledge,  i.e.,  with- 
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out  storing  pre-calculated  gains  for  all  possible  failure  states,  some  degree 
of  on-line  control  design  capability  is  required.  It  is  especially  desirable  to 
maintain  command  response  of  the  system  as  close  to  nominal  as  possible. 
One  promising  approach  to  achieving  this  goal  is  to  combine  integral 
compensation  (for  proper  steady-state  performance)  with  implicit  model¬ 
following  (for  minimally  variant  transient  response,  eigenvalues,  and 
eigenvectors).  Linear-quadratic  realizations  of  such  systems  are  explored 
in  Ref.  30. 

One  important  "side  effect"  of  the  first  program  has  been  the  devel¬ 
opment  of  an  interactive  LISP-Pascal  translator  that  runs  on  the  IBM  PC- 
AT  computer.  With  the  translator,  it  is  possible  to  develop  an  expert  sys¬ 
tem  on  the  PC  using  LISP;  when  a  satisfactory  rule  structure  has  been 
obtained,  new  rules  are  automatically  coded  in  Pascal  for  fast  execution. 
Both  LISP  and  Pascal  expert  systems  use  the  same  data  base,  facilitating 
program  development.  The  compiled  Pascal  code  typically  runs  over  forty 
times  faster  than  the  interpreted  LISP  code  [29]. 

The  three  theses  to  be  completed  will  document  the  remaining 
principal  results  of  this  project.  Several  characteristics  of  model-following 
controllers  and  extensions  to  the  Control  Equation  Parser  are  presented  in 
the  M.S.E.  thesis  of  Parvadha  Suntharalingam  [33].  The  Rule-Based  Fault- 
Tolerant  Flight  Control  System  is  presented  in  the  Ph.D.  diesis  of  David 
Handelman  [34].  An  alternate  approach  to  intelligent  restructurable  control 
is  presented  in  the  Ph.D.  thesis  of  Chien  Huang  [35]. 


2,2  COMPUTER-AIDED  HEURISTICS  FOR  PILOTED  FLIGHT 


The  project  Computer-Aided  Heuristics  for  Piloted  Flight  was  begun 
in  March  1985  and  was  completed  in  March  1988.  This  was  an  investiga¬ 
tion  of  the  potential  for  improving  the  effectiveness  and  survivability  of 
hazardous  flight  missions  through  the  use  of  on-board  computation.  The 
principal  approach  of  the  study  was  the  development  of  a  symbolic  repre¬ 
sentation  for  the  pilot's  functions,  incorporation  of  this  model  in  a  compu¬ 
tational  structure,  and  simulation  of  the  process.  Research  results  have 
been  documented  in  five  interim  technical  reports  [36-40]  and  one  technical 
paper  [41].  One  M.S.E.  thesis  [42]  will  be  completed  shortly. 
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2.2.1  Cockpit  Technology  and  Simulation 

In  Ref.  36,  Parvadha  Suntharalingam  explored  the  features  of  a  voice 
recognition  unit  for  possible  use  in  the  cockpit.  The  unit  was  speaker- 
dependent,  that  is,  it  required  training  with  a  given  vocabulary  as  spoken 
by  a  specific  individual.  Tests  were  run  with  a  50-word  vocabulary 
representative  of  normal  piloting  functions  to  determine  the  unit’s  error 
rates  as  functions  of  machine  training  level  and  to  determine  the  relative 
merits  of  structured  and  unstructured  grammars.  It  was  found  that  error 
rates  varied  from  one  speaker  to  the  next;  some  speakers  required  more 
training  passes  than  others  to  achieve  a  given  level  of  recognition  accuracy. 
It  also  was  noted  that  a  structured  grammar  required  less  training  than  an 
unstructured  one  to  achieve  a  given  accuracy.  However,  the  latter  may  be 
preferred  for  its  greater  flexibility;  with  sufficient  training,  the  error  rates 
may  be  reduced  to  acceptable  levels. 

Brenda  Belkin  developed  a  demonstration  expert  system  to  evaluate  a 
knowledge  acquisition  tool  for  simulating  an  electronic  aid  to  assist  the 
pilot  with  in-flight  emergency  procedures  [371.  Four  modes  of  pilot  assis¬ 
tance  were  identified,  two  requiring  manual  intervention  and  two  operating 
autonomously. 

John  McCaffrey  developed  a  graphics-display  simulation  of  a  multi¬ 
function  display  for  a  high-performance  aircraft  [38,39].  The  display 
represents  a  horizontal  situation  indicator  with  both  "North-Up"  and 
"Aircraft-Heading-Up"  modes  for  use  in  the  cockpit  simulator  described  in 
Chapter  3. 


2.2.2  Cooperative  Rule-Based  Systems  for  Aircraft  Navigation 
and  Control 

Nine  cooperating  rule-based  systems  for  the  combat-aircraft 
environment  were  developed  in  the  AUTOCREW  expert  system  [40-42]. 
Each  component  system  is  modeled  on  a  typical  World  War  II  bomber 
crew  member  having  specific  task  responsibilities.  Tasks  performed  by 
crew  members  are  easily  identified,  well-defined,  and  familiar  to  operating 
personnel.  The  tasks  to  be  performed  fall  into  analogous  logical  groups. 

The  AUTOCREW  members  are  responsible  for  performing  tasks 
and  controlling  functions  associated  with  the  aircraft  and  its  on-board 
systems.  The  modeled  crew  members  are  COPILOT  (flight  control), 
ENGINEER  (system  monitoring,  fault  diagnosis,  and  reconfiguration), 


NAVIGATOR  (navigation),  COMMUNICATOR  (radio/data  operations), 
OBSERVER  (lookout  and  alarm),  ATTACKER  (offensive  weapon  con¬ 
trol),  DEFENDER  (defensive  weapon  control),  and  SPOOFER 
(countermeasures).  The  ninth  rule-based  system  (EXECUTIVE)  functions 
on  a  higher  level  than  the  others,  coordinating  mission-specific  tasks  and 
addressing  overall  mission  objectives.  The  human  pilot  is,  of  course,  in 
overall  command;  AUTOCREW  works  in  parallel  to  his  goal-oriented 
direction. 

AUTOCREW  knowledge  bases  are  developed  and  implemented 
independently.  Shared  parameters  are  identified  through  the  design  pro¬ 
cess.  These  "global"  variables  are  used  to  exchange  information  between 
data  bases.  A  change  in  value  of  a  shared  parameter  in  one  knowledge  base 
can  invoke  search  activity  within  another  knowledge  base.  The  block  dia¬ 
gram  in  Fig.  9  depicts  the  integration  of  AUTOCREW  within  a  pilot-vehi¬ 
cle  framework.  Communication  between  the  pilot  and  the  system  would 
follow  typical  cockpit-design  practice,  using  graphical  and  audio  displays, 
manual  control  devices,  and  voice  input. 


Figure  9.  AUTOCREW  Configuration. 

A  summary  of  the  specific  tasks  associated  with  AUTOCREW  is 
shown  in  Table  2.  Since  this  research  deals  with  the  design  of  the  system 
on  a  macroscopic  level,  it  is  sufficient  initially  to  incorporate  a  general 
structure  into  each  knowledge  base,  outlining  only  major  tasks.  A  graphi¬ 
cal  representation  of  a  typical  crew  member's  knowledge  base 
(DEFENDER)  is  shown  in  Fig.  10.  The  symbolism  follows  that  presented 
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earlier,  with  the  addition  of  indicators  for  shared  parameters,  dynamic 
parameters,  and  "asked  for"  parameters.  Each  rule  contains  a  premise  and 
an  action;  in  order  for  the  action  statements  to  be  executed,  the  conditional 
statements  of  the  premise  must  be  true. 


Table  2 

Summary  of  AUTOCREW  Tasks  and 
Skeletal  Knowledge-Base  Contents 


AUTOCREVY 

COMPONENT 

MAJOR 

TASKS  PARAM 

ETERS 

RULES 

COPILOT 

FLIGHT  CONTROL,  AIRCRAFT 
PERFORMANCE,  TERRAIN 
FOLLOWING ,  TERRAIN 

AVOIDANCE 

10 

10 

ENGINEER 

AIRCRAFT  SYSTEM  DIAGNOSIS. 
RECONFIGURATION,  EMERGENCY 
PROCEDURES 

6 

6 

NAVIGATOR 

NAV  SENSOR  MANAGEMENT, 

N'AV  ERROR  STATE  ESTIMATION, 
DYNAMIC  ROUTE  PLANNING 

18 

23 

COMMUNICATOR 

RADIO  OPERATIONS, 

DATA  LINK 

5 

5 

OBSERVER 

LOOKOUT,  ALARM: 

•  weather,  air  .  fie 

•  inbound  armament 

IDENTIFICATION  FRIEND  OR  FOE 

13 

12 

ATI  ACKER 

OFFENSIVE  WEAPONS  STORES 
MANAGEMENT,  OFFENSIVE  FIRE 
CONTROL  SYSTEM, TARGET 
ACQUISITION/PRIORITIZATION 

13 

12 

DEFENDER 

DEFENSIVE  WEAPONS  STORES 
MANAGEMENT,  DEFENSIVE  FIRE 
CONTROL  SYSTEM 

13 

9 

SPOOFER 

ELECTRONIC  MEASURES, 
ELECTRONIC  COUNTERMEASURES 

5 

5 

EXECUTIVE 

MISSION  PLANNING,  COMMAND, 
SPECIALIZED  TASK  COORDINATION 

12 

13 

The  Princeton  Rule-Based  Controller  (PRBC)  used  here  and  above  is 
a  unique  software  architecture  for  combining  procedural  and  symbolic 
processing.  The  knowledge  base  is  developed  in  the  LISP  computer  lan¬ 
guage  and  is  translated  with  the  inference  engine  into  the  Pascal  language. 
The  ease  with  which  Pascal  code  can  be  embedded  in  the  knowledge-base 
structure  makes  the  PRBC  a  highly  suitable  tool  for  task  and  algorithm 
scheduling.  The  PRBC  inference  engine  uses  a  goal-directed,  depth-first 
search  to  operate  on  a  knowledge  base.  In  depth-first  search,  the  left-most 
branch  of  an  AND/OR  graph  is  first  searched  exhaustively.  If  the  value  of 


a  goal  parameter  is  required,  the  inference  engine  proceeds  down  a  branch 
until  enough  information  is  inferred  to  determine  the  value  of  the  goal 
parameter.  The  graphical  representation  of  each  knowledge  base  facilitates 
tracing  the  logic  flow. 
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The  simulation  testbed  for  AUTOCREW  made  use  of  a  conventional 
personal  computer.  Coded  keystrokes  controlled  the  values  of  several 
knowledge-base  parameters,  allowing  the  designer  to  test  search  activity 
easily.  The  simulation  included  a  partitioned  video  display,  shown  in  Fig. 
11,  that  presented  the  activity  of  each  crew  member  during  a  simulation. 
The  display  updates  on  each  computation  cycle.  Features  of  the  display 
include  controlled  scrolling  of  information,  flashing  of  crew-member  win¬ 
dows  to  indicate  the  need  for  attention,  and  variable  pen-color  selection  to 
describe  the  age  of  messages. 
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Figure  11.  AUTOCREW  Display  for  Engineering  Development. 
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3.  LABORATORY  FOR  CONTROL  AND  AUTOMATION 


The  Laboratory  for  Control  and  Automation  has  been  a  focal  point 
for  this  research  program.  As  a  component  of  Princeton’s  Department  of 
Mechanical  and  Aerospace  Engineering,  the  laboratory  has  close  associa¬ 
tion  with  the  graduate  and  undergraduate  students  of  the  university.  At  any 
given  time,  several  projects  normally  are  in  progress,  with  specific  topics 
chosen  by  participating  students,  faculty,  and  staff.  These  projects  consti¬ 
tute  the  thesis  research  of  graduate  students  (at  both  the  M.S.E.  and  Ph.D. 
levels),  the  independent  work  projects  of  engineering  juniors  and  seniors, 
and  the  research  of  faculty  and  research  staff  members. 

The  Laboratory  for  Control  and  Automation  is  located  in  the  von 
Neumann  Building,  immediately  adjacent  to  Princeton  University's  Engi¬ 
neering  Quadrangle.  Principal  computing  resources  include  a  Symbolics 
3670  LISP  Machine,  a  Silicon  Graphics  IRIS  3020  Workstation,  a  Macin¬ 
tosh  II  computer,  an  IBM  PS-2/80  computer,  two  IBM  PC-AT  computers, 
and  two  IBM  PC/XT  computers,  all  of  which  are  linked  by  an  Ethernet 
communications  network  using  the  TCP/IP  protocol.  The  most  frequently 
used  programming  languages  are  Pascal,  FORTRAN,  LISP,  and  C;  various 
other  languages  and  programs,  including  MACSYMA  and  expert  system 
shells,  are  available.  Access  to  the  University's  IBM  3081  computer  and 
the  John  von  Neumann  Center's  Eta*0  computer  is  afforded  by  four  ports 
on  the  University's  broadband  network.  Special-purpose  computers  for 
real-time  control  and  data  acquisition  have  been  developed  using  Multibus 
and  STD-bus  architectures  with  various  central  processors.  A  Verbex 
4000  connected-speech  recognition  system  and  several  analog  computers 
also  are  available  for  experimentation. 

The  Laboratory's  cockpit  simulator  provides  a  single-person  crew 
station  with  both  conventional  and  advanced  control  devices,  including  the 
speech  recognition  device  mentioned  above.  Displays  for  the  "out-the- 
window"  view  and  the  control  panel  devices  are  generated  entirely  by 
computers  and  presented  on  color  cathode-ray  tubes.  The  external  view  is 
generated  and  displayed  by  the  IRIS  3020  Workstation,  which  has  1024  x 
768 -pixel  resolution  and  can  perform  over  85,000  3-D  transformations  per 
second.  The  central  computing  unit  that  performs  dynamic  and  control 
calculations,  accepts  analog  inputs,  drives  the  panel  displays,  and  commands 
the  external  view  is  a  special-purpose  Multibus  computer  employing  paral¬ 
lel  processors  and  controlled  by  an  IBM  PC-AT  computer. 


4.  CONCLUSION 


The  principal  topic  of  research  in  this  effort  was  the  development  of 
analysis  and  design  methods  for  fault-tolerant  control  systems,  using  artifi¬ 
cial  intelligence  concepts  to  screen  failure  hypotheses,  and  more  conven¬ 
tional  control  theory  for  reconfiguration  and  actual  control.  A  Rule-Based 
Flight  Control  System  for  a  tandem-rotor  helicopter,  implemented  with 
parallel  microprocessors  and  operating  in  real  time,  and  a  computer-aided 
controls  system  design  tool  called  a  Control  Equation  Parser  were 
developed  in  the  course  of  this  research.  On  the  basis  of  this  research,  it 
can  be  concluded  that  real-time  applications  of  artificial  intelligence 
concepts  in  practical  control  systems  are  easily  implementable. 

The  sub-task  entitled  "Computer-Aided  Heuristics  for  Piloted  Flight" 
identified  an  expert  system  structure  that  would  reduce  the  pilot  workload 
associated  with  flying  a  single-seat  high-performance  aircraft.  This 
research  culminated  in  the  definition  of  AUTOCREW,  an  "expert  system 
of  expert  systems"  based  on  the  paradigm  of  a  World  War  II  bomber  crew. 
A  highly  parallel  structure  that  is  amenable  to  the  use  of  parallel  hardware 
is  a  natural  outgrowth  of  tnis  work. 

Both  tasks  made  use  of  the  Princeton  Rule-Based  Controller,  a 
unique  software  architecture  for  combining  procedural  and  symbolic  pro¬ 
cessing.  The  knowledge  base  is  developed  in  the  LISP  computer  language 
and  is  translated  with  the  inference  engine  into  the  Pascal  language.  The 
ease  with  which  logic  can  be  specified  in  LISP  and  with  which  Pascal  code 
can  be  embedded  in  the  knowledge-base  structure  makes  this  a  highly  suit¬ 
able  tool  for  task  and  algorithm  scheduling. 
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